Re: Routers as tftp servers [7:27912]

2001-12-03 Thread John Tafasi

Ok, I guess I need to explain my question in other words. If you are at the
console of route A, can you upload a config file from router A to Router B?

Thanks
John Tafasi
""Nicolas FEVRIER""  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> > "TFTP does not provide any security for file transfers, so it should not
be
> > available to a public firewall interface. Unauthorized users can upload
new
> > config files to your router, as well as download your current stored
> configs
> > for analysis."
> >
> > How can you configure the router to accept TFTP file uploads?
>
> I use :
> tftp-server flash:c3640-is-mz.121-5.T9.bin
> in my "source" router to allow other routers to copy the ios image from
> this
> one.
>
> Check this out :
> http://www.cisco.com/warp/public/63/copyimage.html
>
> Nicolas.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=28035&t=27912
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Routers as tftp servers [7:27912]

2001-12-02 Thread Kent

""the-other -jason""  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> JP wrote:
>
> > It is a lot saver and easy to manage if you just use a PC, I do
> > not see why
> > you would want to use your router as tftp server.
>
> Your PC might not be in the appropriate location to act as the tftp
server.
> For example, at an ISP, the routers are internet connected and the PCs are
> on a management LAN behind a firewall. You'd have to punch a hole in that
> firewall, but the routers are obviously directly connected to each other.


Where are your servers receiving snmp traps?
As Nicolas mentioned, there are maybe exceptions, but that's how far I would
go.

>
> Jason
> author, Boson bcmsn1, bscn2, bsci2, Quizware ccie




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=27957&t=27912
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Routers as tftp servers [7:27912]

2001-12-02 Thread Nicolas FEVRIER

JP wrote:
> 
> Nicolas,
> 
> It is a lot saver and easy to manage if you just use a PC, I do not see why
> you would want to use your router as tftp server.
> 
> JP

Hi JP,
to give you a good example (good because I had to do it last week ;)).
I had several core routers connected with high bandwidth lines
(FastEthernet
and ATM OC3), and I needed to upgrade them but I only had access to
a subsidiary office connected to the main network via an ISDN line.
So I just upload the first router of the main network (via ISDN... take
a while...), and I configured this router to be a tftp server. Then
I uploaded my IOS image in the others backbone routers from the first
one.
It's just an example, and I'm sure there is many reasons not to use a
router
as a tftp server (security, cpu consumption, ...) but the feature exists
and it's good to know it :)

Regards,

Nicolas.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=27939&t=27912
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Routers as tftp servers [7:27912]

2001-12-02 Thread the-other -jason

JP wrote:

> It is a lot saver and easy to manage if you just use a PC, I do
> not see why
> you would want to use your router as tftp server.

Your PC might not be in the appropriate location to act as the tftp server.
For example, at an ISP, the routers are internet connected and the PCs are
on a management LAN behind a firewall. You'd have to punch a hole in that
firewall, but the routers are obviously directly connected to each other.

Jason
author, Boson bcmsn1, bscn2, bsci2, Quizware ccie


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=27938&t=27912
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Routers as tftp servers [7:27912]

2001-12-01 Thread JP

Nicolas,

It is a lot saver and easy to manage if you just use a PC, I do not see why
you would want to use your router as tftp server.

JP

""Nicolas FEVRIER""  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> > "TFTP does not provide any security for file transfers, so it should not
be
> > available to a public firewall interface. Unauthorized users can upload
new
> > config files to your router, as well as download your current stored
> configs
> > for analysis."
> >
> > How can you configure the router to accept TFTP file uploads?
>
> I use :
> tftp-server flash:c3640-is-mz.121-5.T9.bin
> in my "source" router to allow other routers to copy the ios image from
> this
> one.
>
> Check this out :
> http://www.cisco.com/warp/public/63/copyimage.html
>
> Nicolas.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=27918&t=27912
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Routers as tftp servers [7:27912]

2001-12-01 Thread Nicolas FEVRIER

> "TFTP does not provide any security for file transfers, so it should not be
> available to a public firewall interface. Unauthorized users can upload new
> config files to your router, as well as download your current stored
configs
> for analysis."
> 
> How can you configure the router to accept TFTP file uploads?

I use :
tftp-server flash:c3640-is-mz.121-5.T9.bin
in my "source" router to allow other routers to copy the ios image from
this
one.

Check this out :
http://www.cisco.com/warp/public/63/copyimage.html

Nicolas.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=27913&t=27912
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Routers as tftp servers [7:27912]

2001-12-01 Thread John Tafasi

"TFTP does not provide any security for file transfers, so it should not be
available to a public firewall interface. Unauthorized users can upload new
config files to your router, as well as download your current stored configs
for analysis."


How can you configure the router to accept TFTP file uploads?


Thanks

John Tafasi




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=27912&t=27912
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]